General

  • Target

    49689213518575exeexeexeex.exe

  • Size

    292KB

  • MD5

    49689213518575920f46f159d03effcd

  • SHA1

    5d0fe19762d81f12b6cc73330a772d9a031cb068

  • SHA256

    316cb705a5755c6cde40a878fa085dd6576e5b78e6c6c322c7043d7b4ad07315

  • SHA512

    dd831a940b73cac20777cebc5d213860504bf21c69b86e6a0ba47b0d82d0585e0a1d4bb0ff4d0964279b38e1272fe72b64b83e292f0dc153f6880508a10666a9

  • SSDEEP

    6144:0nfgOFRUQZ2VcUoSSwu5To9EPfQcB/3iXl7p0zhuU8s:0lFucUoSSwu5To9EgcB/3iXlNEhR

Score
10/10

Malware Config

Extracted

Family

vidar

Version

55.7

Botnet

1537

C2

https://t.me/deadftx

https://www.ultimate-guitar.com/u/smbfupkuhrgc1

http://116.202.2.1:80

Attributes
  • profile_id

    1537

Signatures

  • Vidar family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 49689213518575exeexeexeex.exe
    .exe windows x86

    c8cb3b2b458252307694817e0bb40a75


    Headers

    Imports

    Sections